cdsoft records

2 published records for vendor cdsoft.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2022-27247No exploit	onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., datacdsoft · winhotel.mx · CWE-639 Pre-auth Broken access control (IDOR)	Medium5.3	—	1.0%	May 13, 2022
21Monitor	CVE-2014-5737No exploit	The CDsoft (aka com.wCDSOFT) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middlecdsoft · cdsoft · CWE-310	Medium5.4	—	0.3%	Sep 9, 2014

CVE-2022-27247
21Monitor
onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
cdsoft · winhotel.mxMay 13, 2022
CVE-2014-5737
21Monitor
The CDsoft (aka com.wCDSOFT) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle
MediumCVSS 5.4No exploitEPSS 0%
cdsoft · cdsoftSep 9, 2014